Repository navigation

Harden DNS proxy lifecycles and add outbound interface binding - #214

Merged

aarond10 merged 10 commits into

review/dns-proxy-hardening

Oct 19, 2026

Merged

Harden DNS proxy lifecycles and add outbound interface binding#214
aarond10 merged 10 commits into
masterfrom
review/dns-proxy-hardening

Commits on Oct 19, 2026
- dns_tcp: prevent frame length overflow
  aarond10
  committed
  83f6b72
- https_client: bound in-flight requests
  aarond10
  committed
  1fa4e76
- options: drop to user's primary group
  aarond10
  committed
  2746cdd
- doh_proxy: detect newly added resolver addresses
  aarond10
  committed
  d33431a
- dns_tcp: queue responses without blocking
  aarond10
  committed
  63de734
- doh_proxy: retain resolve list through client reset
  aarond10
  committed
  d7540a2
- https_client: allocate socket watchers on demand
  aarond10
  committed
  b4dd4d4
- Bind HTTPS and bootstrap DNS sockets to an outbound interface
  aarond10
  committed
  c437451
- options: avoid implicit group reset for non-root startup
  aarond10
  committed
  055e3a7
- Address review feedback and cap shutdown at five seconds
  aarond10
  committed
  69a2065